Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Clear
ID Title
CVE-2025-25249 Vulnerability in fortinet (CVE-2025-25249)
vulnerability in fortinet (CVE-2025-25249). Successful exploitation can lead to full system takeover.
CVE-2025-71101 Out-of-Bounds Read in linux (CVE-2025-71101)
vulnerability in linux (CVE-2025-71101). Confidential information can be exposed externally.
CVE-2025-71095 Vulnerability in linux (CVE-2025-71095)
vulnerability in linux (CVE-2025-71095). Confidential information can be exposed externally.
CVE-2025-71097 Vulnerability in linux (CVE-2025-71097)
vulnerability in linux (CVE-2025-71097). Risk of unauthorized operations or information disclosure.
CVE-2025-71098 Vulnerability in c (CVE-2025-71098)
vulnerability in c (CVE-2025-71098). Risk of unauthorized operations or information disclosure.
CVE-2025-71093 Out-of-Bounds Read in linux (CVE-2025-71093)
vulnerability in linux (CVE-2025-71093). Confidential information can be exposed externally.
CVE-2025-71099 Use-After-Free in linux (CVE-2025-71099)
vulnerability in linux (CVE-2025-71099). Successful exploitation can lead to full system takeover.
CVE-2025-71100 Vulnerability in c (CVE-2025-71100)
vulnerability in c (CVE-2025-71100). Risk of unauthorized operations or information disclosure.
CVE-2025-71085 Vulnerability in c (CVE-2025-71085)
vulnerability in c (CVE-2025-71085). Risk of unauthorized operations or information disclosure. Exploitable via ``netlabelctl``.
CVE-2025-71086 Vulnerability in linux (CVE-2025-71086)
vulnerability in linux (CVE-2025-71086). Successful exploitation can lead to full system takeover.
CVE-2025-71088 Vulnerability in c (CVE-2025-71088)
vulnerability in c (CVE-2025-71088). Risk of unauthorized operations or information disclosure.
CVE-2025-71090 Vulnerability in linux (CVE-2025-71090)
vulnerability in linux (CVE-2025-71090). Risk of unauthorized operations or information disclosure.
CVE-2025-71092 Out-of-Bounds Write in linux (CVE-2025-71092)
out-of-bounds write in linux (CVE-2025-71092). Successful exploitation can lead to full system takeover.
CVE-2025-71079 Vulnerability in linux (CVE-2025-71079)
vulnerability in linux (CVE-2025-71079). Risk of unauthorized operations or information disclosure.
CVE-2025-71078 Vulnerability in linux (CVE-2025-71078)
vulnerability in linux (CVE-2025-71078). Successful exploitation can lead to full system takeover.
CVE-2025-71080 Vulnerability in linux (CVE-2025-71080)
vulnerability in linux (CVE-2025-71080). Risk of unauthorized operations or information disclosure.
CVE-2025-71082 Vulnerability in c (CVE-2025-71082)
vulnerability in c (CVE-2025-71082). Successful exploitation can lead to full system takeover.
CVE-2025-71075 Use-After-Free in linux (CVE-2025-71075)
vulnerability in linux (CVE-2025-71075). Successful exploitation can lead to full system takeover.
CVE-2025-71068 Vulnerability in linux (CVE-2025-71068)
vulnerability in linux (CVE-2025-71068). Successful exploitation can lead to full system takeover.
CVE-2025-71072 Vulnerability in linux (CVE-2025-71072)
vulnerability in linux (CVE-2025-71072). Risk of unauthorized operations or information disclosure.
CVE-2025-71074 Vulnerability in linux (CVE-2025-71074)
vulnerability in linux (CVE-2025-71074). Successful exploitation can lead to full system takeover.
CVE-2025-68823 Vulnerability in linux (CVE-2025-68823)
vulnerability in linux (CVE-2025-68823). Risk of unauthorized operations or information disclosure.
CVE-2025-68817 Use-After-Free in linux (CVE-2025-68817)
vulnerability in linux (CVE-2025-68817). Successful exploitation can lead to full system takeover.
CVE-2026-0881 Sandbox escape in the Messaging System component. This vulnerability affects Firefox < 147.
Sandbox escape in the Messaging System component. This vulnerability affects Firefox < 147.
CVE-2026-0878 Vulnerability in mozilla (CVE-2026-0878)
vulnerability in mozilla (CVE-2026-0878). Confidential information can be exposed externally.
CVE-2026-0880 Vulnerability in mozilla (CVE-2026-0880)
vulnerability in mozilla (CVE-2026-0880). Successful exploitation can lead to full system takeover.
CVE-2026-0882 Use-After-Free in mozilla (CVE-2026-0882)
vulnerability in mozilla (CVE-2026-0882). Successful exploitation can lead to full system takeover.
CVE-2026-0891 Buffer Overflow in mozilla (CVE-2026-0891)
vulnerability in mozilla (CVE-2026-0891). Successful exploitation can lead to full system takeover.
CVE-2026-0877 Vulnerability in mozilla (CVE-2026-0877)
vulnerability in mozilla (CVE-2026-0877). Confidential information can be exposed externally.
CVE-2026-0879 Buffer Overflow in mozilla (CVE-2026-0879)
vulnerability in mozilla (CVE-2026-0879). Successful exploitation can lead to full system takeover.
CVE-2025-13444 OS Command Injection in progress (CVE-2025-13444)
OS command injection in progress (CVE-2025-13444). Successful exploitation can lead to full system takeover.
CVE-2025-66176 Vulnerability in hikvision (CVE-2025-66176)
vulnerability in hikvision (CVE-2025-66176). Successful exploitation can lead to full system takeover.
CVE-2026-20805 KEV [KEV] Information Disclosure in Microsoft windows (CVE-2026-20805)
vulnerability in Microsoft windows (CVE-2026-20805). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
CVE-2026-22200 Vulnerability in enhancesoft (CVE-2026-22200)
vulnerability in enhancesoft (CVE-2026-22200). Confidential information can be exposed externally.
CVE-2025-8110 KEV [KEV] Path Traversal in gogs (CVE-2025-8110)
path traversal in gogs (CVE-2025-8110). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-68493 XXE (XML External Entity) in apache (CVE-2025-68493)
vulnerability in apache (CVE-2025-68493). Confidential information can be exposed externally.
CVE-2025-9222 Cross-Site Scripting (XSS) in gitlab (CVE-2025-9222)
cross-site scripting in gitlab (CVE-2025-9222). Confidential information can be exposed externally. Mitigation: upgrade to `18.5.5, 18.6.3, 18.7.1` or later.
CVE-2025-13761 Cross-Site Scripting (XSS) in gitlab (CVE-2025-13761)
cross-site scripting in gitlab (CVE-2025-13761). Confidential information can be exposed externally. Mitigation: upgrade to `18.6.3, 18.7.1` or later.
CVE-2025-13772 Vulnerability in gitlab (CVE-2025-13772)
vulnerability in gitlab (CVE-2025-13772). Confidential information can be exposed externally. Mitigation: upgrade to `18.5.5, 18.6.3, 18.7.1` or later.
CVE-2025-70974 Vulnerability in CVE-2025-70974 (CVE-2025-70974)
vulnerability in CVE-2025-70974 (CVE-2025-70974). Successful exploitation can lead to full system takeover.
CVE-2025-65518 Vulnerability in dos (CVE-2025-65518)
vulnerability in dos (CVE-2025-65518). Risk of unauthorized operations or information disclosure.
CVE-2026-0674 Vulnerability in wordpress (CVE-2026-0674)
vulnerability in wordpress (CVE-2026-0674). Risk of unauthorized operations or information disclosure.
CVE-2025-12543 Vulnerability in redhat (CVE-2025-12543)
vulnerability in redhat (CVE-2025-12543). Confidential information can be exposed externally. Exploitable via `Host header`.
CVE-2009-0556 KEV [KEV] Code Injection in Microsoft office (CVE-2009-0556)
code injection in Microsoft office (CVE-2009-0556). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-37164 KEV [KEV] Code Injection in Hewlett packard enterprise (hpe) hewlett-packard-enterprise-hpe (CVE-2025-37164)
code injection in Hewlett packard enterprise (hpe) hewlett-packard-enterprise-hpe (CVE-2025-37164). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2025-59381 Path Traversal in path-traversal (CVE-2025-59381)
path traversal in path-traversal (CVE-2025-59381). Confidential information can be exposed externally.
CVE-2025-62842 Vulnerability in qnap (CVE-2025-62842)
vulnerability in qnap (CVE-2025-62842). Successful exploitation can lead to full system takeover.
CVE-2024-58315 Vulnerability in tosi (CVE-2024-58315)
vulnerability in tosi (CVE-2024-58315). Successful exploitation can lead to full system takeover.
CVE-2025-66823 Cross-Site Scripting (XSS) in trueconf (CVE-2025-66823)
cross-site scripting in trueconf (CVE-2025-66823). Risk of unauthorized operations or information disclosure.
CVE-2025-66835 Vulnerability in trueconf (CVE-2025-66835)
vulnerability in trueconf (CVE-2025-66835). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →